Support multiple client secret for better client secret rotation and usage

This seems really useful from a security standpoint and also useful for maintaining zero-downtime. I was surprised something like this wasn’t available already.